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Amendments to the Claims; 

This listing of claims will replace all prior versions, and listings of claims in the application: 
Listing of Claims: 

25. (currently amended) In a clustering system having primary and 
secondary host computers coupled to a storage system and a management computer, wherein 
the primary and secondary host computers include cluster management functions, wherein the 
storage system includes a LUN security function therein so that [[a]] one or more 
predetermined host computers of the clustering system can access at least one of a plurality of 
logical imits in the storage system, a method comprising: 

storing access control information in the storage system, in connection with 
host identification information and logical unit identification information, wherein the LUN 
security function in the storage system allows the primary host computer to access a specific 
logical imit of the logical units and disallows the secondary host computer to access the 
specific logical unit based on the access control information; 

changing ownership for the specific logical imit from the primary host 
computer to the secondary host computer by the cluster management functions: 

based upon ownership information provided by the cluster management 
functions, coordinating management of security for the specific logical unit in the 
management computer based on corresponding information to the access control information, 
the corresponding information to the access control information being stored in the 
management computer: and 

changing tiie access control information in the storage system, by th e storag e 
system using th e LUN s e curity function locat e d therein, for [[disabling]] disallowing the 
primary host computer to access the at l e ast on e of a plurality of logical units specific logical 
unit and [[enabUng]] allowing the secondary host computer to access the at l e ast one of a 
plurality of logical units specific logical unit based upon a request for changing the access 
control information from the management computer; 
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wherein the request for changing the access control information from the 
management computer is issued [[when]] if the secondary host computer takes over 
processing of the primary host computer. 

26. (currently amended) The method of claim 25, wherein the request for 
changing the access control information from the management computer is issued after the 
secondary host computer gains ownership for [[at least one of a plurality of]] the specific 
logical unit[[s]]. 

27. (currently amended) The method of claim 26, wherein the secondary 
host computer gains ownership of the [[at least one]] specific logical unit when detecting a 
change of condition in the primary host computer. 

28. (previously presented) The method of claim 27, wherein the condition 
comprises a fault condition. 

29. (canceled) 

30. (canceled) 

3 1 . (new) In a clustering system having primary and secondary host 
computers coupled to a. storage system and a management computer, wherein the primary and 
secondary host computers include cluster management fimctions, wherein the storage system 
includes a LUN security fimction therein so that one or more predetermined host computers 
of the clustering system can access at least one of a plurality of logical units in the storage 
system, a method comprising: 

storing access control information in the storage system, in cormection with 
host identification information and logical unit identification information, wherein the LUN 
security fimction in the storage system allows the primary host computer to access a specific 
logical unit of the logical units and disallows the secondary host computer to access the 
specific logical unit based on the access control information; 
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changing ownership for the specific logical unit from the primary host 
computer to the secondary host computer by the cluster management functions; 

based upon ownership information provided by the cluster management 
functions, coordinating management of security for the specific logical unit in the 
management computer based on corresponding information to the access control information, 
the corresponding information to the access control information being stored in the 
management computer; and 

changing the access control information in the storage system, for disallowing 
the primary host computer to access the specific logical imit and allowing the secondary host 
computer to access the specific logical unit based upon a request for changing the access 
control information firom the management computer; 

wherein the request for changing the access control information is coordinated 
by the management computer and is issued based upon a message sent when the secondary 
host computer takes over processing of the primary host computer. 
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